Kurz gesagt
- CVE-2018-1999033 ist eine Schwachstelle (MITTEL (CVSS 6.5)) in org.jenkins-ci.plugins:anchore-container-scanner, container image scanner (anchore).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.87%, höher als bei 59.0% aller Schwachstellen.
- Abhilfe: auf 1.0.17 oder neuer aktualisieren.
Description
An exposure of sensitive information vulnerability exists in Jenkins Anchore Container Image Scanner Plugin 10.16 and earlier in AnchoreBuilder.java that allows attackers with Item/ExtendedRead permission or file system access to the Jenkins master to obtain the password stored in this plugin's configuration.
NVD description
An exposure of sensitive information vulnerability exists in Jenkins Anchore Container Image Scanner Plugin 10.16 and earlier in AnchoreBuilder.java that allows attackers with Item/ExtendedRead permission or file system access to the Jenkins master to obtain the password stored in this plugin's configuration.
Weitere Schwachstellen in org.jenkins-ci.plugins:anchore-container-scanner
Alle anzeigen →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free